SOC Analyst

About Ethos
Ethos was built to make it faster and easier to get life insurance for the next million families. Our approach blends industry expertise, technology, and the human touch to find you the right policy to protect your loved ones.

We leverage deep technology and data science to streamline the life insurance process, making it more accessible and convenient. Using predictive analytics, we are able to transform a traditionally multi-week process into a modern digital experience for our users that can take just minutes We've issued billions in coverage each month and eliminated the traditional barriers, ushering the industry into the modern age. Our full-stack technology platform is the backbone of family financial health.

We make getting life insurance easier, faster and better for everyone.

Our investors include General Catalyst, Sequoia Capital, Accel Partners, Google Ventures, SoftBank, and the investment vehicles of Jay-Z, Kevin Durant, Robert Downey Jr and others. This year, we were named on CB Insights' Global Insurtech 50 list and BuiltIn's Top 100 Midsize Companies in San Francisco. We are scaling quickly and looking for passionate people to protect the next million families

About The Role
We are seeking a motivated and detail-oriented
SOC Analyst
to join our Security Operations Center team. The SOC Analyst will be responsible for monitoring, detecting, analyzing, and responding to security incidents in a timely and effective manner. This role is critical to protecting our organization's information assets and ensuring the integrity, confidentiality, and availability of systems and data.

Key Responsibilities

• Monitor security alerts and events using SIEM (Security Information and Event Management) tools.
• Analyze and triage security incidents to determine impact and urgency.
• Escalate confirmed incidents to the appropriate teams and support investigation efforts.
• Perform initial forensic analysis and threat detection using tools such as EDR, IDS/IPS, firewalls, and antivirus solutions.
• Maintain incident tracking and documentation in ticketing systems.
• Collaborate with other IT and security team members during incident response.
• Assist in developing and maintaining SOC playbooks, runbooks, and standard operating procedures (SOPs).

Qualifications
Required:

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field, or equivalent work experience.
• 1–3 years of experience in cybersecurity or IT operations.
• Understanding of TCP/IP, network protocols, and basic threat detection.
• Familiarity with security tools such as SIEM, EDR, firewalls, IDS/IPS, and malware analysis.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills.

Preferred

• Security certifications such as CompTIA Security+, CySA+, CEH, GCIA, or Splunk Core Certified User.
• Knowledge of MITRE ATT&CK framework, NIST, and other security standards.
• Familiarity with scripting languages (e.g., Python, PowerShell) is a plus.

Working Conditions

• May require shift work (24x7 SOC environment).
• Ability to work under pressure in a fast-paced environment.
• Occasional on-call duty or weekend coverage.

Don't meet every single requirement? If you're excited about this role but your past experience doesn't align perfectly with every qualification in the job description, we encourage you to apply anyway. At Ethos we are dedicated to building a diverse, inclusive and authentic workplace.

We are an equal opportunity employer who values diversity and inclusion and look for applicants who understand, embrace and thrive in a multicultural world. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. Pursuant to the SF Fair Chance Ordinance, we will consider employment for qualified applicants with arrests and conviction records.

To learn more about what information we collect and how it may be used, please refer to our California Candidate Privacy Notice.